Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: ujRIENtdInGSr0LReA01YCAsFSyq2r8mmUrYPFOgGPw=
Subject key identifier: 07:13:9C:57:C0:31:76:50:C8:6A:CD:50:48:4B:7D:3B:83:06:B3:24
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 0199FC586F3990C3F9689E2A57CD9BA25BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (hash: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=)
2: RN4snQmQ10sMC0pt3uecgVuseDw.roa (hash: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=)
3: TMFEuWpJtp-N546RTZSeOr_ihcc.roa (hash: 15tgIF1xV8iqz3lwud0LDIWMxNL1aGMOQ99+FVGNT5o=)
4: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: jAPmuwshmWVwnuUHbleVjBnkxkyzuYdTyNksiSXXJaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6f:39:90:c3:f9:68:9e:2a:57:cd:9b:a2:5b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=07139c57c0317650c86acd50484b7d3b8306b324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:70:e8:c2:2a:fb:67:47:32:dd:e3:d2:de:
42:24:af:a1:d4:8e:bf:13:48:a6:57:5b:90:cf:24:
a3:6a:ee:28:52:c7:1b:45:23:77:c6:73:8e:34:3e:
30:c4:ea:77:d8:67:7d:f4:69:90:b3:a9:77:06:dc:
5c:7a:00:f3:df:b4:2d:c1:f3:e3:bc:f1:be:a8:9c:
e9:2c:80:20:a2:df:f4:a2:41:7e:77:00:8d:78:27:
c1:a4:f5:e3:45:0c:85:ab:0d:b6:77:62:e1:32:1e:
d3:6a:31:2f:f8:08:06:25:47:3e:e1:c3:b4:fb:f3:
29:64:e5:86:65:18:fc:81:77:b9:51:4f:de:aa:59:
5f:86:ee:16:57:b0:b0:82:b2:51:69:be:0c:a1:74:
b1:88:de:db:c2:36:d1:26:fb:07:cf:3b:91:b0:32:
c0:df:d0:6b:96:c1:ea:14:65:e3:a9:2c:66:81:f4:
71:08:bd:58:86:23:77:68:d9:81:b6:17:4a:04:83:
f1:0a:63:80:ec:fd:09:d6:3e:f7:a7:9e:1f:a7:ab:
a9:20:dd:c1:4b:26:55:d9:d6:9e:62:87:c8:d0:3b:
cc:a6:b1:dd:48:1e:74:d4:a3:cf:e5:dd:2b:35:7d:
83:d1:6d:52:83:24:4b:cf:d9:84:c4:0f:ea:3d:95:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:13:9C:57:C0:31:76:50:C8:6A:CD:50:48:4B:7D:3B:83:06:B3:24
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c4:22:47:c2:6c:28:76:3b:63:3a:6d:74:18:a0:2f:78:e4:
c9:ba:8d:1d:1f:d4:e0:d3:8d:3a:51:fa:d3:65:5a:aa:34:2a:
90:00:dc:91:4e:10:a2:81:ed:cb:21:fe:cd:8b:5f:49:44:83:
e9:25:30:09:a0:e7:e0:fb:40:b5:8e:2b:f6:db:1e:0a:3c:96:
79:d2:b5:55:c0:57:17:80:f6:f1:8e:dd:93:d2:f9:5b:6b:87:
65:c0:46:12:3b:a6:2b:c5:e3:93:0e:f5:dc:1c:a3:b7:5e:15:
26:35:4c:c1:36:69:ed:41:c4:9f:11:5b:1c:55:34:c4:93:3e:
a7:cc:49:70:4e:5a:71:65:f0:32:95:dc:c5:e8:31:7c:ed:ba:
c8:01:04:ac:dc:b0:ca:c5:82:80:e6:7a:ab:79:c3:58:12:c6:
51:7a:12:f9:38:09:6b:09:39:49:81:04:b1:a3:94:d8:37:2a:
4c:82:77:06:dc:e5:e3:db:33:38:68:90:ab:47:38:43:05:9e:
89:3c:ea:ab:e0:0d:42:92:a0:dd:c1:f6:35:91:27:e0:c6:54:
f8:3d:d4:e5:52:63:50:77:64:fe:ae:78:06:34:51:b7:d8:3f:
8f:87:20:e1:6a:f1:8a:cc:ad:9f:ff:d4:ed:1a:8d:fa:ba:49:
8c:ac:65:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:32 2025 by rpki-client